How to block Vlans from seeing each other on the netowk
I have the ER605 Router with no controller. I have successfully setup my Vlans and all traffic is being routed correctly. However How do I ban say Vlan from seeing Vlan 2 etc. I am not sure where this is done. Is it in the router or each switch ?
All of my Vlans have the same subnet so I Am not sure if I have to change the subnet for each vlan.
Is this done under Access Control in the firewall ?
Also if my main computer is on Vlan 1 and I am running Plex, DNLA Server. If I drop my TVS on Vlan 2 and block Vlan traffic from each other, How do I give Vlan 2 access to say PLESK on Vlan 1 ? A Single application.
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
Hi @johngalt
Thanks for posting in our business forum.
Same VLAN ID means the same subnet.
Devices in the same subnet will receive the ARP.
Then they discover each other.
Set them in different subnets = VLAN, you will not receive the ARP from them and not see them.
The price for not seeing them, if you insist, is to block the ARP, and you will lose connection for LAN and Internet.
There is no workaround for this. Just separate them in different VLAN interfaces.
If you use ACL to block VLAN 1 and 2 from accessing each other, there is no way to bypass it due to the rule you've set.
- Copy Link
- Report Inappropriate Content
Hi @johngalt
Thanks for posting in our business forum.
Same VLAN ID means the same subnet.
Devices in the same subnet will receive the ARP.
Then they discover each other.
Set them in different subnets = VLAN, you will not receive the ARP from them and not see them.
The price for not seeing them, if you insist, is to block the ARP, and you will lose connection for LAN and Internet.
There is no workaround for this. Just separate them in different VLAN interfaces.
If you use ACL to block VLAN 1 and 2 from accessing each other, there is no way to bypass it due to the rule you've set.
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
Hi @johngalt
Thanks for posting in our business forum.
johngalt wrote
Not sure I follow: So should I add each VLAN in its own subnet ?
Something like this:
How to Set Up VLAN Interface on the Omada Router
Each subnet means a broadcast area. You want them not to see each other in different VLANs, so separate them.
- Copy Link
- Report Inappropriate Content
@johngalt i am not using the omada controller and my switches are switches that can't be controlled in omada.
- Copy Link
- Report Inappropriate Content
Information
Helpful: 0
Views: 187
Replies: 4
Voters 0
No one has voted for it yet.